Conceptronic C300BRS4A_V2 (RT3052F) RUNNING DD-WRT!!!!!!!!!

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Ralink SoC based Hardware
Goto page 1, 2  Next
Author Message
madaleno
DD-WRT Novice


Joined: 02 Dec 2009
Posts: 29

PostPosted: Wed Apr 21, 2010 1:40    Post subject: Conceptronic C300BRS4A_V2 (RT3052F) RUNNING DD-WRT!!!!!!!!! Reply with quote
As i wrote here: http://www.dd-wrt.com/phpBB2/viewtopic.php?p=430581#430581
My C300BRS4A arrived but it was a revision 2 model. only 2 antennas...
There are good and bad news!

The good is that it's a Ralink RT3052F based device, it has 4mb flash and 32mb ram.(some devices already running dd-wrt with this configuration Very Happy)
The bad is that i can't find serial nor jtag ports :(

Take a look at the internals

EDIT: IT HAS RS232!!!!!! AND RUNS DD-WRT


Last edited by madaleno on Fri May 07, 2010 5:31; edited 3 times in total
Sponsor
madaleno
DD-WRT Novice


Joined: 02 Dec 2009
Posts: 29

PostPosted: Wed Apr 21, 2010 1:41    Post subject: Reply with quote
Front
madaleno
DD-WRT Novice


Joined: 02 Dec 2009
Posts: 29

PostPosted: Fri May 07, 2010 5:25    Post subject: IT's A GO!!!!!!! Reply with quote
IT's RUNNING DD-WRT!!!!!!!!!!!

YEAH!!!!!!!!!

HOWTO:

Connect RX TX and GND to backside of router as shown in picture to a rs232-ttl level shifter into com port

Using a terminal program select 57600,8,N,1

on u-boot press 2

Set your PC fixed ip:10.10.10.3

you need a tftpserver with this firmware:
http://www.dd-wrt.com/forum/viewtopic.php?p=324454#324454 I renamed it to test.bin

Here is my log:
Code:

U-Boot 1.1.3 (Feb 13 2009 - 09:48:32)

Board: Ralink APSoC DRAM:  32 MB
relocate_code Pointer at: 81fac000
flash_protect ON: from 0xBF000000 to 0xBF01FFAF
protect on 0
protect on 1
protect on 2
protect on 3
protect on 4
protect on 5
protect on 6
protect on 7
protect on 8
flash_protect ON: from 0xBF030000 to 0xBF03FFFF
protect on 10
*** Warning - bad CRC, using default environment

============================================
Ralink UBoot Version: 3.2
--------------------------------------------
ASIC 3052_MP2 (Port5<->None)
DRAM COMPONENT: 128Mbits
DRAM BUS: 32BIT
Total memory: 32 MBytes
Date:Feb 13 2009  Time:09:48:32
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384

 ##### The CPU freq = 384 MHZ ####

 SDRAM bus set to 32 bit
 SDRAM size =32 Mbytes

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   9: Load Boot Loader code then write to Flash via TFTP.

You choosed 2
                                                                                                                                                           0

 eth_register
Eth0 (10/100-M)
 enetvar=ethaddr,Eth addr:00:AA:BB:CC:DD:10
 00:AA:BB:CC:DD:10:

 eth_current->name = Eth0 (10/100-M)


2: System Load Linux Kernel then write to Flash via TFTP.
 Warning!! Erase Linux in Flash then burn new one. Are you sure?(Y/N)
 Please Input new ones /or Ctrl-C to discard
        Input device IP (10.10.10.123) ==:

        Input server IP (10.10.10.3) ==:

        Input Linux Kernel filename () ==:test.bin

 netboot_common, argc= 3
 *************buf = 0x81fcc120
 **********NexTxPacket = 81fe4200

 NetTxPacket = 0x81FE4200

 NetRxPackets[0] = 0x81FE4800

 NetRxPackets[1] = 0x81FE4E00

 NetRxPackets[2] = 0x81FE5400

 NetRxPackets[3] = 0x81FE5A00

 NetRxPackets[4] = 0x81FE6000

 NetRxPackets[5] = 0x81FE6600

 NetRxPackets[6] = 0x81FE6C00

 NetRxPackets[7] = 0x81FE7200

 NetRxPackets[8] = 0x81FE7800

 NetRxPackets[9] = 0x81FE7E00

 NetRxPackets[10] = 0x81FE8400

 NetRxPackets[11] = 0x81FE8A00

 NetRxPackets[12] = 0x81FE9000

 NetRxPackets[13] = 0x81FE9600

 NetRxPackets[14] = 0x81FE9C00

 NetRxPackets[15] = 0x81FEA200

 NetRxPackets[16] = 0x81FEA800

 NetRxPackets[17] = 0x81FEAE00

 NetRxPackets[18] = 0x81FEB400

 NetRxPackets[19] = 0x81FEBA00

 KSEG1ADDR(NetTxPacket) = 0xA1FE4200

 NetLoop,call eth_halt !

 NetLoop,call eth_init !
Trying Eth0 (10/100-M)

 Waitting for RX_DMA_BUSY status Start... done

 Header Payload scatter function is Disable !!

 ETH_STATE_ACTIVE!!
Using Eth0 (10/100-M) device
TFTP from server 10.10.10.3; our IP address is 10.10.10.123
Filename 'test.bin'.

 TIMEOUT_COUNT=10,Load address: 0x80100000
Loading: Got ARP REPLY, set server/gtwy eth addr (00:1c:c0:e1:dd:93)
Got it
T Got ARP REQUEST, return our IP
#
 first block received
################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ####
done
Bytes transferred = 3677444 (381d04 hex)
NetBootFileXferSize= 00381d04
Erase linux kernel block !!
From 0xBF050000 To 0xBF3DFFFF

 b_end =BF3FFFFF
Erase Flash from 0xbf050000 to 0xbf3dffff in Bank # 1

 erase sector  = 12
sect = 12,s_last = 68,erase poll = 984037

 erase sector  = 13
sect = 13,s_last = 68,erase poll = 988146

 erase sector  = 14
*sect = 14,s_last = 68,erase poll = 1050035

 erase sector  = 15
sect = 15,s_last = 68,erase poll = 959326

 erase sector  = 16
*sect = 16,s_last = 68,erase poll = 974561

 erase sector  = 17
sect = 17,s_last = 68,erase poll = 970708

 erase sector  = 18
*sect = 18,s_last = 68,erase poll = 964342

 erase sector  = 19
sect = 19,s_last = 68,erase poll = 1016002

 erase sector  = 20
*sect = 20,s_last = 68,erase poll = 1028561

 erase sector  = 21
sect = 21,s_last = 68,erase poll = 977335

 erase sector  = 22
*sect = 22,s_last = 68,erase poll = 1010794

 erase sector  = 23
sect = 23,s_last = 68,erase poll = 992981

 erase sector  = 24
*sect = 24,s_last = 68,erase poll = 972456

 erase sector  = 25
sect = 25,s_last = 68,erase poll = 986833

 erase sector  = 26
*sect = 26,s_last = 68,erase poll = 972354

 erase sector  = 27
sect = 27,s_last = 68,erase poll = 1069317

 erase sector  = 28
*sect = 28,s_last = 68,erase poll = 984721

 erase sector  = 29
sect = 29,s_last = 68,erase poll = 1006366

 erase sector  = 30
*sect = 30,s_last = 68,erase poll = 1037180

 erase sector  = 31
sect = 31,s_last = 68,erase poll = 1025773

 erase sector  = 32
*sect = 32,s_last = 68,erase poll = 1086232

 erase sector  = 33
sect = 33,s_last = 68,erase poll = 1003555

 erase sector  = 34
*sect = 34,s_last = 68,erase poll = 1004498

 erase sector  = 35
sect = 35,s_last = 68,erase poll = 976225

 erase sector  = 36
*sect = 36,s_last = 68,erase poll = 1022716

 erase sector  = 37
sect = 37,s_last = 68,erase poll = 990664

 erase sector  = 38
*sect = 38,s_last = 68,erase poll = 1027784

 erase sector  = 39
sect = 39,s_last = 68,erase poll = 1033797

 erase sector  = 40
sect = 40,s_last = 68,erase poll = 959232
.
 erase sector  = 41
sect = 41,s_last = 68,erase poll = 1022453

 erase sector  = 42
sect = 42,s_last = 68,erase poll = 959880

 erase sector  = 43
*sect = 43,s_last = 68,erase poll = 1032890

 erase sector  = 44
sect = 44,s_last = 68,erase poll = 990944

 erase sector  = 45
*sect = 45,s_last = 68,erase poll = 971583

 erase sector  = 46
sect = 46,s_last = 68,erase poll = 989297

 erase sector  = 47
*sect = 47,s_last = 68,erase poll = 1008644

 erase sector  = 48
sect = 48,s_last = 68,erase poll = 975274

 erase sector  = 49
*sect = 49,s_last = 68,erase poll = 987144

 erase sector  = 50
sect = 50,s_last = 68,erase poll = 1021677

 erase sector  = 51
*sect = 51,s_last = 68,erase poll = 985702

 erase sector  = 52
sect = 52,s_last = 68,erase poll = 998395

 erase sector  = 53
*sect = 53,s_last = 68,erase poll = 973043

 erase sector  = 54
sect = 54,s_last = 68,erase poll = 1047850

 erase sector  = 55
*sect = 55,s_last = 68,erase poll = 983886

 erase sector  = 56
sect = 56,s_last = 68,erase poll = 986083

 erase sector  = 57
*sect = 57,s_last = 68,erase poll = 959429

 erase sector  = 58
sect = 58,s_last = 68,erase poll = 1008581

 erase sector  = 59
*sect = 59,s_last = 68,erase poll = 1006077

 erase sector  = 60
sect = 60,s_last = 68,erase poll = 1006134

 erase sector  = 61
*sect = 61,s_last = 68,erase poll = 978779

 erase sector  = 62
sect = 62,s_last = 68,erase poll = 972019

 erase sector  = 63
sect = 63,s_last = 68,erase poll = 971616

 erase sector  = 64
*sect = 64,s_last = 68,erase poll = 976453

 erase sector  = 65
sect = 65,s_last = 68,erase poll = 973102

 erase sector  = 66
*sect = 66,s_last = 68,erase poll = 997553

 erase sector  = 67
sect = 67,s_last = 68,erase poll = 1005416

 erase sector  = 68
*sect = 68,s_last = 68,erase poll = 999510
 done
Erased 57 sectors

 Copy linux image[3677444 byte] to Flash[0xBF050000]....
Copy to Flash...
 Copy 3677444 byte to Flash...
 addr = 0xBF0A409C ,cnt=3333224
 addr = 0xBF0F813A ,cnt=2989002
 addr = 0xBF14C1D8 ,cnt=2644780
 addr = 0xBF1A0276 ,cnt=2300558
 addr = 0xBF1F4314 ,cnt=1956336
 addr = 0xBF2483B2 ,cnt=1612114
 addr = 0xBF29C450 ,cnt=1267892
 addr = 0xBF2F04EE ,cnt=923670
 addr = 0xBF34458C ,cnt=579448
 addr = 0xBF39862A ,cnt=235226 done
## Booting image at bf050000 ...
   Image Name:   DD-WRT v24 Linux Kernel Image
   Created:      2009-07-18  18:25:04 UTC

 System Control Status = 0x20440000
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    856958 Bytes = 836.9 kB
   Load Address: 80000000
   Entry Point:  80267000
   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80267000) ...
## Giving linux memsize in MB, 32

Starting kernel ...


LINUX started...

 THIS IS ASIC
Linux version 2.6.23.17 (root@dd-wrt) (gcc version 4.1.2) #572 Sat Jul 18 20:20:57 CEST 2009

 The CPU frequency set to 384 MHz
32M RAM Detected!
CPU revision is: 0001964c
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
Built 1 zonelists in Zone order.  Total pages: 8128
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock4 rootfstype=squashfs noinitrd
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 80007c, status = 1100ff00
PID hash table entries: 128 (order: 7, 512 bytes)
calculating r4koff... 003a9800(3840000)
CPU frequency 384.00 MHz
Using 192.000 MHz high precision timer.
console [ttyS1] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 29504k/32768k available (2141k kernel code, 3264k reserved, 315k data, 120k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
Generic PHY: Registered new driver
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
Load RT2880 Timer Module(Wdg/Soft)
devfs: 2004-01-31 Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
squashfs: version 3.0 (2006/03/15) Phillip Lougher
io scheduler noop registered
io scheduler deadline registered (default)
Ralink gpio driver initialized
Serial: 8250/16550 driver $Revision: 1.3 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
PPP generic driver version 2.4.2
PPP Deflate Compression module registered
PPP BSD Compression module registered
MPPE/MPPC encryption/compression module registered
NET: Registered protocol family 24
tun: Universal TUN/TAP device driver, 1.6
tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
ralink flash device: 0x800000 at 0xbf000000
Ralink SoC physically mapped flash: Found 1 x16 devices at 0x0 in 16-bit bank
 Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.

found squashfs at 122000
Creating 6 MTD partitions on "Ralink SoC physically mapped flash":
0x00000000-0x00030000 : "uboot"
0x00030000-0x00040000 : "uboot-config"
0x00040000-0x00050000 : "factory-defaults"
0x00050000-0x003f0000 : "linux"
0x00122000-0x003f0000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
0x003f0000-0x00400000 : "nvram"
u32 classifier
    Actions configured
Netfilter messages via NETLINK v0.30.
nf_conntrack version 0.5.0 (1024 buckets, 4096 max)
ctnetlink v0.93: registering with nfnetlink.
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
ip_tables: (C) 2000-2006 Netfilter Core Team
IPP2P v0.8.2 loading
ClusterIP Version 0.8 loaded successfully
TCP bic registered
TCP cubic registered
TCP westwood registered
TCP highspeed registered
TCP hybla registered
TCP htcp registered
TCP vegas registered
TCP scalable registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Welcome to PF_RING 3.2.1
(C) 2004-06 L.Deri <deri@ntop.org>
NET: Registered protocol family 27
PF_RING: bucket length    128 bytes
PF_RING: ring slots       4096
PF_RING: sample rate      1 [1=no sampling]
PF_RING: capture TX       No [RX only]
PF_RING: transparent mode Yes
PF_RING initialized correctly.
PF_RING: registered /proc/net/pf_ring/
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
GDMA1_MAC_ADRH -- : 0x00000000
GDMA1_MAC_ADRL -- : 0x00000000
Ralink APSoC Ethernet Driver Initilization. v2.00  256 rx/tx descriptors allocated, mtu = 1500!
NAPI enable, weight = 0, Tx Ring = 256, Rx Ring = 256
GDMA1_MAC_ADRH -- : 0x0000000c
GDMA1_MAC_ADRL -- : 0x43305277
PROC INIT OK!
decode /dev/mtdblock4
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 120k freed
starting Architecture code for rt2880
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1002
switch reg write offset=70, value=ffff506f
wland: No such file or directory
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device
SIOCGIFFLAGS: No such device

DD-WRT v24-sp2 std (c) 2009 NewMedia-NET GmbH
Release: 07/18/09 (SVN revision: 12524)
ÿ
DD-WRT login:




TO DO:
try newer builds
madaleno
DD-WRT Novice


Joined: 02 Dec 2009
Posts: 29

PostPosted: Fri May 07, 2010 5:43    Post subject: latest Reply with quote
it also runs

http://www.dd-wrt.com/dd-wrtv2/downloads/others/eko/BrainSlayer-V24-preSP2/04-16-10-r14289/Aceex-NR22/firmware.bin
Vladlenin
DD-WRT Novice


Joined: 15 Jan 2010
Posts: 11

PostPosted: Sat May 08, 2010 3:24    Post subject: build 14311 Reply with quote
Latest build - 14311 - also tested in the same hardware.
sigfridov
DD-WRT Novice


Joined: 29 Jan 2010
Posts: 7
Location: Chile

PostPosted: Sun May 16, 2010 2:03    Post subject: For which Tenda model? Reply with quote
Some one knows if it is applicable for some Tenda model?
Please report Model, version and socket.
Regards
Sigfridov
penta
DD-WRT Novice


Joined: 27 May 2010
Posts: 4

PostPosted: Mon May 31, 2010 13:58    Post subject: Tenda W306R Reply with quote
I have also this router, exactly version 2. It seems it could work with Aceex Firmwares and D-Link DIR615 D2, but problem seems to be flashing via webinterface (currently hardware RS232 interface required to flash firmware). Someone was able to extract original Tenda firmware, it could help us to understand more?
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17417
Location: Hesse/Germany

PostPosted: Sat Jul 17, 2010 15:12    Post subject: Reply with quote
http://www.dd-wrt.com/wiki/index.php/Supported_Devices#Tenda
_________________
GEGEN die EEG-UMLAGE auf EIGENVERBRAUCH!
_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
techsolo
DD-WRT Novice


Joined: 26 Jul 2010
Posts: 1

PostPosted: Mon Jul 26, 2010 16:18    Post subject: Reply with quote
Could you please update your status on the firmware and the information on howto flash it with pictures. Can you deliver a scheme of how to wire the programming cable/level shifter?
rocket
DD-WRT User


Joined: 28 Feb 2008
Posts: 109

PostPosted: Thu Dec 16, 2010 8:14    Post subject: Reply with quote
Hi,

I'll purchase one unit of this if I can put the DD-WRT firmware without soldering.
Anyone has instructions to flash it?

Thank you!
madaleno
DD-WRT Novice


Joined: 02 Dec 2009
Posts: 29

PostPosted: Thu Dec 16, 2010 8:19    Post subject: Reply with quote
i've been away for a while but i don't think it's possible without soldering console cable...

someone correct me if i'm wrong...
rocket
DD-WRT User


Joined: 28 Feb 2008
Posts: 109

PostPosted: Fri Dec 17, 2010 19:15    Post subject: Reply with quote
Hi Madaleno!

Are you sure? Several firmwares have a recovering mode. You know other similar routers with a firmware that we can upload to this unit?

Thank you for your time!
madaleno
DD-WRT Novice


Joined: 02 Dec 2009
Posts: 29

PostPosted: Fri Dec 17, 2010 20:27    Post subject: Reply with quote
The problem is missing jtag header, so if bricked no recovery.....
That's why i haven't tried more radical flashing techniques like changing header and so....
Conceptronic firmware is crap and does check firmware compatibility, i don't know any recovery mode on this bootloader but it's a possibility.
I already had rs232/ttl cable from unlocking old mobile phones, so, soldering and flashing using bootloader console was easier...

I already sold my router and bought a wrt320n because 2.4ghz congestion in my building.... I'm now using 5ghz band N speeds Smile
papi4_atori
DD-WRT Novice


Joined: 28 Feb 2011
Posts: 3

PostPosted: Wed Mar 09, 2011 20:03    Post subject: Reply with quote
Can someone give more information?
madaleno
DD-WRT Novice


Joined: 02 Dec 2009
Posts: 29

PostPosted: Wed Mar 09, 2011 20:04    Post subject: Reply with quote
What kind of information you need?
Goto page 1, 2  Next Display posts from previous:    Page 1 of 2
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Ralink SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum